← All advisories

High severity7.5NVD Advisory· Published Aug 26, 2019· Updated Jun 17, 2026

CVE-2019-15640

CVE-2019-15640

Description

Limesurvey before 3.17.10 does not validate both the MIME type and file extension of an image.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Limesurvey/Limesurvey2 versions
cpe:2.3:a:limesurvey:limesurvey:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:limesurvey:limesurvey:*:*:*:*:*:*:*:*range: <3.17.10
- (no CPE)range: <3.17.10
Limesurvey/Limesurveydescription

Patches

Vulnerability mechanics

References

1

github.com/LimeSurvey/LimeSurvey/commit/0479e3ff93ff1473a25c71e83cc011920b072b4cnvdPatchThird Party Advisory

News mentions

0

No linked articles in our index yet.